CVE-2009-4849

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

0.94%

Published

May 7, 2010

Modified

Apr 28, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBtoutvirtual virtualiq pro 3.2 - Multiple Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in ToutVirtual VirtualIQ Pro 3.2 build 7882 and 3.5 build 8691 allow remote attackers to hijack the authentication of administrators for requests that (1) create a new user account via a save action to tvserver/user/user.do, (2) shutdown a virtual machine, (3) start a virtual machine, (4) restart a virtual machine, or (5) schedule an activity.

Weaknesses (CWE)

CWE-352

Affected Products (2)

toutvirtual · virtualiqvulnerable

References (6)

http://secunia.com/advisories/37359

Vendor Advisory

http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt

Exploit

http://www.securityfocus.com/archive/1/507729/100/0/threaded

http://secunia.com/advisories/37359

Vendor Advisory

http://www.securenetwork.it/ricerca/advisory/download/SN-2009-02.txt

Exploit

http://www.securityfocus.com/archive/1/507729/100/0/threaded

KEV Catalog EPSS Scores Vendors All CVEs